win_dots

Prepare installation media

• download windows image from here
• burn onto usb using ventoy

to install win11 without linking to MS account (and getting to choose your account name):

first method (as of '25) from this thread

• after selecting keeb layout, press Shift+F10 & type start ms-cxh:localonly
  • note it's not right after you've first booted from the USB; first the setup will have to copy the files to our installation drive, only after the first (couple) reboots we can do this step;
  • actually unsure whether waiting is needed... looks like this bypass can be launched at the very beginning?

second account bypass method from abovementioned reddit thread:

• instead, try: (requires Pro version!)
  • choose work or school account
  • select sign-in options where is opt to domain-join this device instead

deprecated method not working as of '25:

• after selecting keeb layout, press Shift+F10 & type OOBE\BYPASSNRO
  • note it's not right after you've first booted from the USB; first the setup will have to copy the files to our installation drive, only after the first (couple) reboots we can do this step;
  • don't forget to unplug eth cable!
  • as of 2025: this reddit post claims this feature is removed

windows setup & bootstrapping

• download install_win.bat and run as admin (ie right click -> admin); note it's important to just download the file instead of git clone - otherwise the linefeeds might be hecked up; so just pull the file and remove it afterwards; later on you can run it from now-pulled win_dots/ (ie this repo).

• if git clone is giving you error:

  remote: HTTP Basic: Access denied fatal: Authentication failed for
  

  then you've likely changed your windows/GroupAD password, and that needs to be updated in Windows Credential Manager

---

After clean win installation checklist:

• activate using massgravel/Microsoft-Activation-Scripts
• declutter/debloat using ChrisTitusTech/winutil
  • import our settings from winutil-settings.json file in this repo
  • alternative debloater tool: builtbybel/BloatyNosy
  • okayish reddit thread on the debloating subject
• run dotter.exe deploy --force from win_dots/dotter (--force to overwrite existing files)

To execute programs/script as root/admin on startup (from here):

• see root_startup/

WSL2 quickstart (all commands from posh, admin only needed for install):

Instructions taken mainly from MS WSL2 installation guide

1. open posh in admin mode and run wsl --install -d Debian

• prompt will ask you to reboot the system
• this command can be re-ran to install other distros

1. follow this MS best practices for setup
2. sudo apt-get --allow-releaseinfo-change update
3. sudo apt-get upgrade --without-new-pkgs
4. sudo apt-get dist-upgrade
5. sudo apt-get install ca-certificates openssh-client
6. follow instructions from /dotfiles:
   • wget ...raw//wanted-branch/...install_system.sh
   • (likely last step, confirm): ./install_system <mode>

• other useful tips:
  • basic WSL commands
  • windows terminal setup/config
  • maybe check this SO question for vcxsrv usage under wsl2
  • another useful vcxsrv thread
  • to see list of available distors, run wsl --list --online
  • to see list of installed distros, run wsl -l -v
  • to set default linux distro used w/ wsl command, run wsl --setdefault Debian; now running wsl npm init will run npm init in debian;
  • note as of WSL2 it's possible to run GUI programs without vcxsrv and the likes: https://learn.microsoft.com/en-us/windows/wsl/tutorials/gui-apps#run-linux-gui-apps !!!!
    • gh: https://github.com/microsoft/wslg
    • this feature uses WSLg; (looks like it's been merged w/ wsl2)
    • looks like WSLg ships Weston w/ a built-in window manager that can't be replaced, meaning no full desktop experience like i3;
    • however this gh comment suggests running nested xserver (Xephyr), which sort of works;
    • troubleshooting issues w/ WSLg
  • WSL doesn't support systemd; if it's really needed, see here
  • setup for starting win manager/forwarding x11
  • potentially useful xserver-related topics:
    • microsoft/WSL#5339
    • https://www.reddit.com/r/bashonubuntuonwindows/comments/m14puc/x_server_with_vpn_connected_via_wsld_wsl_daemon/
    • instructions on preserving x11 connection through sleep/hibernation/VPN
  • share env vars between WSL and windows
  • blog post on how to fwd ssh agent requests from wsl to windows

misc

• importing jdk cert to jdk in posh: .\keytool.exe -import -alias "my cert alias" -keystore C:\tools\cygwin\home\laur89\.sdkman\candidates\java\8.0.181-zulu\jre\lib\security\cacerts -file C:\tools\cygwin\mycert.crt (didn't work from cygwin like: $JAVA_HOME/bin/keytool -import -file cert.crt -keystore C:\tools\cygwin\home\laliste\.sdkman\candidates\java\8.0.181-zulu\jre\lib\security\cacerts -alias "my cert alias")
• to hide a local drive from windows, see this SO answer; same info is also included in this makeuseof article
  • actually what I did was simply right click -> 'disable' in Device Manager
• if you see PCI Memory Controller and/or SM Bus Controller driver issues under Control Panel (as described in this reddit thread), you likely need to install Intel Chipset INF Utility; ofc this assumes you're on Intel chipset.
• for gaming, avoid windows N versions; otherwise you'll see many errors with games that will require you to install missing components; eg if launching a game you're greeted w/ Please reinstall the program - DSOUND.dll error/message, you need to install "media feature pack": -> settings -> apps -> optional features -> add an optional feature - view features -> meadia feature pack.
• to back up explorer sidebar shortcuts, back up contents of shell:recent\AutomaticDestinations (or %AppData%\Microsoft\Windows\Recent\AutomaticDestinations address)
  • this appears to contain our own-created shortcuts/quick access links
  • this post says to only back up f01b4d95cf55d32a.automaticDestinations-ms file - think that's true
  • same post has a reply linking to a script that exports & imports said bookmarks/pinned folders
  • note it's possible the user account name has to match when importing, although that export-import vb script claims to handle username change
  • there's also shell:recent\CustomDestinations, but unsure what it's for

todo

• replace dotter w/ chezmoi
• see if wsl instructions can be updated from https://github.com/infokiller/config-public/tree/master/install#wsl-installation-notes